1、Nation-Aligned APTs in 2025AI-Fueled Threats and the Shifting Global Cyber BalanceTed LeeSenior Engineer-Threat Research,APT OpsKakara HiroyukiSenior Threat Researcher,Forward-Looking Threat Research Team AI and DataFeike HacquebordPrincipal Threat Researcher,Forward-Looking Threat Research Team4Int
2、roduction7Geopolitical Threat Landscape20Industry Victimology and Vertical Analysis25Strategic Forecast:A Two-Year Horizon30Risk Mitigation and Defensive Strategies37Conclusion:Resilience,Not PerfectionTable of ContentsTrendAI,the global AI security leader and enterprise business unit of Trend Micro
3、,empowers organizations with full AI visibility and consolidated security that inspires confidence,drives innovation,and eliminates risk.Trusted by the largest enterprises and governments across 185 countries,TrendAI secures the entire organization,from identities to infrastructure to data.AI Fearle
4、ssly.Learn more:Copyright 2026.Trend Micro Incorporated.All rights reserved.REP00_ Annual_APT_Report_2025_160426USWant more insights like this? Takeaways Cyber operations are now tightly coupled with geopolitical objectives,with APT activity increasingly aligned to geopolitical events and military o
5、perations.Collaboration among APT groups is increasing attack speed and complexity,as access-sharing models such as“Premier Pass-as-a-Service”allow secondary actors to bypass initial compromise stages and complicate attribution.AI is now embedded directly in APT operations,with some nation-state-ali
6、gned actors deploying AI-assisted and semi-autonomous attack components that accelerate campaigns and sharply reduce defender response windows.Resilience at machine speed has become a defensive requirement,forcing organizations to shift from prevention-centric security toward rapid visibility,contai